Thorough understanding of supplier governance, understanding of security management processes, practices and technical countermeasures.